Backup and restoration for storage system

ABSTRACT

A backup method is provided for a file system for managing hierarchical storage including one or more storage media on a computer system including one or more computers. Each of the one or more storage media includes a data part which is separated from an index and on which updated information is appended and kept. Each of a plurality of pieces of data within the file system is managed to be migrated to at least any of the one or more storage media. The backup method includes backing up metadata of the plurality of pieces of data migrated within the file system; and backing up the index of each of the one or more storage media to which the plurality of pieces of data have been migrated, substantially at the same time point as the metadata.

TECHNICAL FIELD

The present invention relates to backup and restoration of a filesystem, and more particularly to a backup method, a restoration method,a storage system, and a program for a file system for hierarchicalstorage.

BACKGROUND

Backups of data and keeping thereof are essential to deal with datamissing due to a disaster and the like. In an actual disaster, thebackup data will be utilized to perform restoration. In recent years,however, since an amount of data to be handled, as referred to as “bigdata,” has tended to increase and also led to a huge amount of backupdata, the time required for the restoration has tended to be prolonged.As a backup technology for the purpose of quick recovery of such a filesystem, for example, JP2013-254513A, has been known.

In addition, tape media are often used as inexpensive backup media.Commonly, in operation, the backup data is saved on tapes while the datais retained on a disk. In a disaster, a method is employed in which allthe backup data is read out from the tapes and recovered in a stateaccessible from the disk. In such a scheme, however, since work cannotbe resumed until the data is read out from all the tapes, the recoverytakes a very long time.

SUMMARY

Embodiments of the present invention provide a backup method for a filesystem having the following characteristics. This file system isconfigured on a computer system including one or more computers, andmanages hierarchical storage including one or more storage media. Eachof the above one or more storage media includes a data part which isseparated from an index and on which updated information is appended andkept. Each of a plurality of pieces of data within the above file systemis managed to be migrated to at least any of the above one or morestorage media.

In one embodiment, the backup method includes, in the computer system,the operations of backing up metadata of the above plurality of piecesof data migrated within the file system; and backing up the index ofeach of the one or more storage media to which the above plurality ofpieces of data have been migrated, substantially at the same time pointas the above metadata. Backup data of the metadata and the index, whichhas been obtained, is used in restoration along with the above one ormore storage media.

Embodiments of the present invention can further provide a restorationmethod for a file system for managing hierarchical storage on a computersystem including one or more computers, and the method has the followingcharacteristics. In this restoration method, one or more storage mediaon which backups of metadata and an index have been performed areprepared. This restoration method includes, in the computer system, theoperations of restoring metadata of a plurality of pieces of data withinthe file system from backup data, and setting, in the restored metadata,the plurality of pieces of data into a state of having been fullymigrated to at least any of the one or more storage media; and restoringthe index of each of the above one or more storage media from databacked up substantially at the same time point as the metadata.

Embodiments of the present invention can further provide a storagesystem having the following characteristics. This storage system caninclude one or more storage drive devices for loading at least one ofone or more storage media constituting hierarchical storage; one or morecomputers for causing a file system to run, the file system managing theabove hierarchical storage; and a management computer included in theabove one or more computers or provided separately from the above one ormore computers.

The management computer can control metadata of a plurality of pieces ofdata migrated within the file system to be backed up, and also controlan index of each of the one or more storage media to which the pluralityof pieces of data have been migrated, to be backed up substantially atthe same time point. Alternatively, the management computer can controlthe metadata of the plurality of pieces of data within the file systemto be restored from backup data, also control the index of each of theone or more storage media to be restored from data backed upsubstantially at the same time point as the above metadata, and set, inthe above metadata, the above plurality of pieces of data into afully-migrated state. Embodiments of the present invention can furtherprovide a program for implementing a management computer for executingthe above backup or restoration.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic configuration diagram of a hierarchical storagemanagement system, in accordance with embodiments of the presentinvention;

FIG. 2 is a hardware configuration diagram of nodes constituting acluster in the hierarchical storage management system, in accordancewith embodiments of the present invention;

FIG. 3 is a software configuration diagram of the hierarchical storagemanagement system, in accordance with embodiments of the presentinvention;

FIG. 4 is a diagram describing problems in performance of a backupprocess and a restoration process in a file system as recognized byembodiments of the present invention;

FIG. 5 is a detailed functional block diagram of a backup driver 230that is responsible for a backup process and a restoration process for afile system for hierarchical storage, in accordance with embodiments ofthe present invention;

FIG. 6 is a flowchart illustrating a backup method for the file systemfor the hierarchical storage, in accordance with embodiments of thepresent invention;

FIG. 7 is a diagram describing the backup process for the file systemfor the hierarchical storage, in accordance with embodiments of thepresent invention;

FIG. 8 is a diagram describing a state where operation has beensubsequently resumed after the backup process for the file system forthe hierarchical storage, in accordance with embodiments of the presentinvention;

FIG. 9 is a flowchart illustrating a restoration method for the filesystem for the hierarchical storage, in accordance with embodiments ofthe present invention;

FIG. 10 is a diagram describing the restoration process for the filesystem for the hierarchical storage, in accordance with embodiments ofthe present invention;

FIG. 11 is a schematic diagram of a format of a tape medium that can beused in the hierarchical storage management system, in accordance withembodiments of the present invention;

FIG. 12 is a flowchart illustrating a file access method afterrestoration in the file system for the hierarchical storage, inaccordance with embodiments of the present invention;

FIG. 13 is a diagram describing the file access method in the filesystem for the hierarchical storage, in accordance with embodiments ofthe present invention;

FIG. 14 is a diagram describing another backup method and anotherrestoration method with write inhibition, in accordance with anembodiment of the present invention; and

FIG. 15 is a diagram describing another backup method and anotherrestoration method with the write inhibition and reclamation, inaccordance with an embodiment of the present invention.

DETAILED DESCRIPTION

Embodiments of the present invention provide a backup method, arestoration method, a storage system, and a program. Some embodiments ofthe present invention can achieve one or more of: shortened recoverytime, an operational file system even after the backup, a small load onthe system, and increased usage efficiency of storage media that aremigration destinations. Embodiments of the present invention recognizethat time required for the restoration greatly affects time ofresumption of business, and thus is desired to be shortened as much aspossible.

Embodiments of the present invention recognize that, in the backup andthe restoration of the file system, it is desirable to shorten recoverytime, and also enable operation of the file system even after thebackup. Moreover, it is also desired to reduce a load on the system, andincrease utilization efficiency of storage media that become migrationdestinations. Accordingly, development of backup and restorationtechnologies for a file system for hierarchical storage has beendesired, which can achieve shortened recovery time, an operational filesystem even after the backup, a small load on the system, and increasedusage efficiency of the storage media that become the migrationdestinations.

Embodiments of the present invention may have several advantageouseffects. According to the above configuration, it is possible to achievethe shortened recovery time, the operational file system even after thebackup, the small load on the system, and the increased usage efficiencyof the storage media that become the migration destinations.

While embodiments of the present invention will be described below, theembodiments of the present invention are not limited to that describedbelow. It should be noted that, in the described embodiment, ahierarchical storage management system 100 will be described as anexample of a storage system that implements backup and restoration of afile system for managing hierarchical storage.

FIG. 1 is a diagram illustrating a schematic configuration of thehierarchical storage management system 100, in accordance withembodiments of the present invention. The hierarchical storagemanagement system 100 illustrated in FIG. 1 includes a cluster 110composed of one or more nodes 112, and implements the file system formanaging the hierarchical storage, on the cluster 110.

In the embodiment illustrated in FIG. 1, the hierarchical storage isconfigured to include a shared disk array 120 including one or moreshared disks 122. Each of the nodes 112 in the cluster 110 isinterconnected to each of the shared disks 122 in the shared disk array120 via a SAN (Storage Area Network) fabric 102. The SAN fabric 102 canbe configured with, but not particularly limited to, an FC-SAN based ona Fibre Channel network configured to include a Fibre Channel switch, anIP-SAN based on a TCP/IP network configured to include a LAN (Local AreaNetwork) switch, or a combination thereof.

A plurality of the nodes 112 share each of the shared disks 122. Thenodes 112 directly access the shared disks 122 via the SAN fabric 102,and also provide indirect file access to other client nodes that are notconnected to the SAN fabric 102. Such a file system, which isdistributed into the one or more nodes 112 constituting the cluster 110,and is accessible from a plurality of nodes (including the clientnodes), is referred to as “distributed shared (parallel) file system.”The distributed shared file system can provide a global name space, andalso provide an input/output striping function, an informationlife-cycle management (ILM) function, and the like, across the pluralityof nodes.

GPFS® is assumed to be used as the distributed shared file system in thedescribed embodiment, which, however, is not particularly limitedthereto, and employment of other distributed shared (parallel) filesystems, such as GFS (Global File System), OCFS (Oracle® Cluster FileSystem), Lustre, and GlusterFS, is not precluded.

In the embodiment illustrated in FIG. 1, the hierarchical storage isfurther configured to include a tape library 130, in addition to theshared disk array 120. The tape library 130 includes one or more tapedrives 132, and one or more tape media 134. The tape drives 132constitute storage drive devices in the present embodiment, and the tapemedia 134 constitute storage media that become migration destinations inthe present embodiment. Each of the nodes 112 in the cluster 110 isconnected to the tape library 130 via the SAN fabric, or via cables,such as FC, LVD (Low Voltage Differential), SCSI (Small Computer SystemInterface), and SAS (Serial Attached SCSI).

The tape library 130 can include a plurality of the tape drives 132, andis configured so that the one or more nodes 112 can access the same setof the tape media 134. Meanwhile, while the tape drives 132 can also bealternately used, each of the tape drives 132 is typically occupied byone node at a time point, and is not shared among the nodes 112, so thateach of the nodes 112 accessing the tape library 130 has its own tapedrive 132.

The tape library 130 is managed by a file system for a tape library,such as LTFS (Liner Tape File System), but is integrated into thedistributed shared file system described above. According to apredetermined policy, files to be migrated from the shared disk array120 are stored in the one or more tape media 134. The integration of thefile system for the tape library 130 into the distributed shared filesystem can be performed by use of, but not particularly limited to, apackage such as LTFS EE (Linear Tape File System Enterprise Edition).The tape media 134 can preferably use, but not particularly limited to,tape cartridges of LTO (Linear Tape-Open) 5 or later that supports LTFS.

The hierarchical storage management system 100 illustrated in FIG. 1 isfurther configured to include a management terminal 140. The managementterminal 140 is a terminal operated by an administrator of thehierarchical storage management system 100, and accepts instructions forthe backup and the restoration of the file system for the hierarchicalstorage, from the administrator. Alternatively, the management terminal140 can also accept criteria or schedules for the backup and therestoration, which are negotiated in advance, from the administrator. Inthis case, the backup or the restoration is automatically started withsatisfaction of a predetermined criterion, or with arrival of scheduledtiming.

It should be noted that, in the example illustrated in FIG. 1, nodes112-1 to 112-M are shown to be connected to shared disks 122-1 to 122-Non the shared disk array 120, and the nodes 112-1 to 112-L are shown tobe connected to tape drives 132-1 to 132-L, respectively, in the tapelibrary 130. It should, however, be noted that FIG. 1 is exemplary.

For example, the shared disk array 120 can be further divided into oneor more pieces of on-line storage (high-speed disks) and one or morepieces of near-line storage (medium-speed disks) in a three-layer (tier)configuration, or flash storage can be added to the shared disk array120. Moreover, for example, the plurality of tape drives 132 may beconfigured to be connected to one node 112. Furthermore, for example,the cluster 110 may include a client node connected via a LAN (LocalArea Network), and a management node that communicates with themanagement terminal to principally perform management of the filesystem.

FIG. 2 is a diagram illustrating a hardware configuration of the nodes112 constituting the cluster 110 in the hierarchical storage managementsystem 100, in accordance with embodiments of the present invention. Asillustrated in FIG. 2, each of the nodes 112 is configured to include asingle-core or multi-core CPU (Central Processing Unit) 10; a memory 12,such as an SDRAM (Synchronous Dynamic Random Access Memory); a storagedevice 14, such as a ROM (Read Only Memory), an HDD (Hard Disk Drive),or a flash memory; a network interface 16; and an input/output interface18.

The network interface 16 is configured as a network adapter, such as anNIC (Network Interface Card), and connects the node 112 to a LAN 104.The input/output interface 18 is configured as a network adapter such asan NIC, an HBA (host bus adapter) such as an FC, or the like, andconnects the node 112 to the SAN fabric 102. The nodes 112 may beinterconnected via an HCA (host channel adapter), such as InfiniBand®.

The node 112, under the control of the CPU 10, reads out variousprograms stored in the storage device 14, deploys the programs on thememory 12, and thereby implements functions and processes for which thenode 112 is responsible, as described below.

It should be noted that while a hardware configuration of the managementterminal 140 is not particularly illustrated, the management terminal140 similarly includes a CPU, a memory, a storage device, and a networkinterface, and can be further configured to include user interfaces,such as a display, a keyboard, and a mouse. While hardwareconfigurations of the shared disk array 120 and the tape library 130 arenot particularly illustrated either, they can be configured to include aprocessor, a memory, a ROM, a network interface, an input/outputinterface, and other appropriate hardware.

FIG. 3 is a software configuration diagram of the hierarchical storagemanagement system 100, in accordance with embodiments of the presentinvention. A hierarchical storage management system (which hereinaftermay simply be referred to as “management system”) 200 illustrated inFIG. 3 is configured to include a distributed shared file system 210, anextension file system 220, and a backup driver 230, in a softwareconfiguration.

The distributed shared file system 210 is a software component, forexample, provided by GPFS®, as described above. The distributed sharedfile system 210 includes a backup/restoration unit 212 that backs up andrestores metadata (which is inode information in the describedembodiment) of the file system, as an internal function. Thebackup/restoration unit 212 is provided as a component responsible for afunction referred to as “SOBAR (Scale Out Backup and Restore),” in aparticular embodiment using GPFS®.

The extension file system 220 integrates the tape library 130 into thedistributed shared file system 210 to provide a software component groupfor extension. The extension file system 220 is configured to include ahierarchical storage management unit 222, a library control unit 224,and a tape file system 226, as such components.

The hierarchical storage management unit 222 performs control ofautomatic migration (referred to as “migration”) of appropriate filesfrom the distributed shared file system (the shared disks 122) to thetape library 130 (the tape media 134), based on the predeterminedpolicy. The hierarchical storage management unit 222 also performscontrol of automatic recall (referred to as “recall”) of the migratedfiles from the tape library 130 to the distributed shared file system,when the files are accessed.

The library control unit 224 controls selection of the tape media andthe state of resources. The library control unit 224 selects the tapemedia, schedules and processes requests for the migration and therecall, based on the predetermined policy.

The tape file system 226 enables the tape library 130 to be mounted asone file system on the tape media 134. The tape media 134 within thetape library 130 are typically accessed as subdirectories within thetape library. The tape file system 226 runs on the nodes connected tothe tape drives that become the migration destinations, and accessesrecording areas on the tape media 134 via a file system interface ofLTFS. It should be noted that, in the described embodiment, while thetape library is described as being mounted as one file system on thetape media 134, an aspect may be employed in which a single tape driveis mounted as one file system on a tape medium, without theconfiguration of the tape library.

In the particular embodiment using GPFS®, the extension file system 220is provided by a software package referred to as “LTFS EE.” In thatcase, the hierarchical storage management unit 222, the library controlunit 224, and the tape file system 226 are referred to as “HierarchicalStorage Manager (HSM),” “Multi-Tape Management Module (MMM),” and “LTFSLE (Liner Tape File System Library Edition)+,” respectively.

Integration of the extension file system 220 (or the tape file system226) for the tape library 130, into the distributed shared file system210 illustrated in FIG. 3 constitutes the file system for managing thehierarchical storage in the present embodiment. This integration enablesfile space management, such as automatic migration of files to tapes,and calling the files from the tapes when the files are accessed, in afile system having one name space in which disks and the tapes areintegrated.

The backup driver 230 controls backup and restoration of this integratedfile system. The backup driver 230 accepts a backup request and arestoration request from the administrator, and then executes a backupprocess and a restoration process for the integrated file system. Thebackup driver 230 will be described in detail below.

It should be noted that the components illustrated in FIG. 3 show thesoftware configuration as the management system 100 including thecluster 110 and the management terminal 140, and are typicallyimplemented in a manner distributed on one or more computersconstituting the management system 100. Corresponding softwarecomponents will operate in cooperation with each other on each computersuch as the node 112.

Hereinafter, prior to detailed description of the backup process and therestoration process for the file system for the hierarchical storageaccording to embodiments of the present invention, a file managementstructure within the above described file system will be outlined first,and also, problems in performance of the backup process and therestoration process will be described with reference to FIG. 4.

FIG. 4 is a diagram describing problems in performance of a backupprocess and a restoration process in a file system as recognized byembodiments of the present invention. FIG. 4 illustrates systems similarto that illustrated in FIG. 1, including an operation-side system as anoperation site 500 and a recovery-side system as a recovery site 520.The operation site 500 and the recovery site 520 include distributedshared file systems 502, 522 operating on the clusters, shared disks504, 524, and tape libraries 506, 526, respectively, in substantiallythe same configuration.

On the distributed shared file system 502, a state where a file(including a directory) on the shared disk 504 accessible from the nodeon the cluster is replicated on a tape medium 512 in the tape library506, so that data exists on both the disk and the tape, is referred toas “pre-migrated state.” As time has elapsed, for a file that is nolonger required to be read out immediately, file body data is deletedfrom the shared disk 504 and exists only on the tape medium 512, whilemetadata (inode information) including attribute information on the fileis left on the distributed shared file system 502. This state where thefile body data exists only on the tape is referred to as “fully-migratedstate.”

In addition to basic file attribute information, such as size and timeof day information, medium identification information (tape ID)identifying the tape where the file body data exists has been saved inthe metadata (the inode information) of the file. This mediumidentification information enables the file to be read out from the tapemedium 512, in response to a request for access to the file. GPFS®includes a function of backing up only this inode information, via theabove described function referred to as “SOBAR.”

If the metadata (the inode information) is backed up on a medium 510 inorder to replicate the distributed shared file system 502 of theoperation site 500, the tape medium 512 in the tape library 506 of theoperation site 500, and the medium 510 are first moved to the recoverysite 520. On the recovery site 520, the metadata (the inode information)of each file is then restored from the medium 510, and the state of eachfile is put into the fully-migrated state. In this way, the file systemcan be replicated without access to file data on the tape.

However, after (1) the backup of the metadata (inode_v0) is performed onthe operation site 500, when (2) the file is updated, (3) the file onthe shared disk 504 is updated (the file becomes file_v1), and also suchchange is reflected in the file on the tape medium 512 (the file becomesfile_v1). Accordingly, subsequently, even if (4) the medium 510 and thetape medium 512 are moved to the recovery site 520, and also (5) thebacked up metadata is restored, inconsistency is caused. Morespecifically, the metadata (inode_v0) at a time point of the taking ofthe backup is restored, while the change after the taking of the backuphas been reflected in the file on the tape (the file becomes file_v1).Consequently, (6) even if the file is attempted to be read out from thetape medium 512 based on the restored metadata (inode_v0), the readoutmay not be performed due to the change in the tape ID or the deletion ofthe file.

In order to avoid such inconsistency, it is conceivable to write-inhibitthe tape that has stored the backup, after the backup of the metadata.The write inhibition enables recovery of the file system withconsistency, but is applied to the tape with a remaining unused portion,and thus prevents efficient use of the capacity of the tape. Moreover,it is also conceivable to perform reclamation for putting the data onthe tape into another tape tightly to rewrite the data, in order toimprove usage efficiency of the tape. The rewrite, however, takes timeand puts a load on the system.

Accordingly, the hierarchical storage management system 100 according toembodiments of the present invention utilizes the backed up metadata ofthe distributed shared file system, and a format of the tape medium, toallow the recovery of the file system for the hierarchical storage, withthe efficient use of the tape capacity, without the time taken for therewrite of the data, and without the load put on the system.Specifically, characteristics of a format of the file system areutilized in which each of the tape media 134 includes an index part, anda data part which is separated from the index part and on which updatedinformation is appended and kept.

With reference to FIGS. 5 to 11, the backup process and the restorationprocess in the hierarchical storage management system 100, in accordancewith embodiments of the present invention will be described in moredetail below.

FIG. 5 is a detailed functional block diagram of the backup driver 230that is responsible for the backup process and the restoration processfor the file system for the hierarchical storage, in accordance withembodiments of the present invention. As illustrated in FIG. 5, thebackup driver 230 includes a metadata backup control unit 232, an indexbackup control unit 234, a metadata restoration control unit 236, and anindex restoration control unit 238.

The backup driver 230 illustrated in FIG. 5 is implemented on the nodes112 constituting the cluster 110, another management node connected tothe cluster 110 via the LAN 104 or the like, or the management terminal140. The backup driver 230, for example, receives the backup request orthe restoration request based on the operation of the managementterminal 140 by the administrator, which, however, is not particularlylimited thereto, and starts the backup process or the restorationprocess. Alternatively, the backup driver 230 can sense that a criterionset by the administrator in advance has been satisfied, or sense thattiming scheduled by the administrator in advance has arrived, and startthe backup process or the restoration process.

The metadata backup control unit 232 controls metadata of a plurality offiles that have already been migrated within the distributed shared filesystem 210, to be backed up at a time point of the backup request. Ametadata backup function, for example, is provided by thebackup/restoration unit 212 in the distributed shared file system 210.In this case, the metadata backup control unit 232 can call thebackup/restoration unit 212 in the distributed shared file system 210,in response to the backup request from the administrator.

The index backup control unit 234 controls an index file of each of theone or more tape media 134 to which the above plurality of files havebeen migrated, to be backed up substantially at the same time point asthe above described metadata. An index of each of the tape media 134 hasbeen stored on a predetermined managed storage area on the shared diskarray 120 in this management system 100. The index backup control unit234 replicates each index at a backup time point which has been storedon the shared disk array 120, to generate backup data of the index.

It should be noted that the files to be backed up are presupposed to bein a management state of having been pre-migrated or fully migrated tothe tape library 130. In other words, files managed in the pre-migratedor fully-migrated state become backup targets. Alternatively, filesdesired to be the backup targets are required to have been put in atleast the pre-migrated state, in advance.

Moreover, backup destination media for the metadata and the index arenot particularly limited, and any storage media may be used, such asmagnetic media, such as tape media and hard disks; optical media, suchas CDs (Compact Discs), DVDs, and Blu-ray®; magneto-optical media, suchas MOs (Magneto-Optical disks); and semiconductor storage media, such asflash memories, and SSDs (Solid State Drives).

The metadata restoration control unit 236 controls the metadata of theplurality of files within the distributed shared file system 210 to berestored from data on the backup destination media. A metadatarestoration function, for example, is provided by the backup/restorationunit 212 in the distributed shared file system 210. In this case, themetadata restoration control unit 236 can call the backup/restorationunit 212 in the distributed shared file system 210, based on therestoration request from the administrator. The metadata restorationcontrol unit 236 further controls the plurality of files involved in therestoration, to be set into a state of having been fully migrated to thetape media 134.

The index restoration control unit 238 controls the index of each of theone or more tape media 134 to be restored from the data on the backupdestination media, which has been backed up substantially at the sametime point as the above metadata. The index is managed on thepredetermined managed storage area on the shared disk array 120 in themanagement system 100. The index restoration control unit 238 replicatesthe backup of each index within the backup destination media, on themanaged storage area on the shared disk array 120. Alternatively, if thebackup destination media are provided to be incorporable in the shareddisk array 120, the backup of each index within the backup destinationmedia may be used as the index on the managed storage area, through suchincorporation, without the replication.

FIG. 6 is a flowchart illustrating a backup method for the file systemfor the hierarchical storage, in accordance with embodiments of thepresent invention. FIG. 7 is a diagram describing the backup process forthe file system for the hierarchical storage, in accordance withembodiments of the present invention.

FIG. 7 illustrates the operation-side system as an operation site 300.The operation site 300 includes a distributed shared file system 302, ashared disk 304, and a tape library 306. If one file (file-a_v1) is putinto the fully-migrated state or the pre-migrated state, a tape ID foridentifying a tape medium 312 that is a migration destination is savedin metadata (inode-a_v1). The tape medium 312 in the LTFS format ispartitioned into an index partition (hereinafter referred to as “IP”)and a data partition (hereinafter referred to as “DP”), and an index(Index_v1) exists on the IP of the tape medium 312. Moreover, in thedescribed embodiment, the index (Index_v1) also exists on the shareddisk 304. Information about which block on the DP of the tape medium 312the above file (file-a_v1) body data has been saved in has been writtenin the index (Index_v1). The backup process illustrated in FIG. 6 isassumed to have been called in such a state.

The process illustrated in FIG. 6 is started from operation S100, inresponse to the backup request from the administrator. In operationS101, the backup driver 230 scans the distributed shared file system302. At a time point of arrival of the backup request, a file that hasalready been migrated to the pre-migrated state or the fully-migratedstate becomes the backup target. A snapshot of the file system is firsttaken to determine a target file. Files of the snapshot are then scannedto determine a backup target file. In an example illustrated in FIG. 7,for example, the file (file-a_v1) becomes the target. Moreover, the tapemedium 312 to which the file (file-a_v1) has been migrated is alsoextracted as the target.

In operation S102, the backup driver 230 performs a backup of metadata(inode image) of the distributed shared file system 302. While FIG. 7illustrates only the metadata (inode-a_v1) of one file, thebackup/restoration unit 212 can perform image backup includingcollectively compressed metadata of a plurality of files within thedistributed shared file system 302.

In operation S103, the backup driver 230 performs a backup of the indexof each tape medium 312, which exists on the shared disk 304,substantially at the same time point as the metadata of the distributedshared file system 302. While FIG. 7 illustrates only the index(Index_v1) of one tape medium 312, if the migration has been performedacross a plurality of tape media, the latest one index on the shareddisk 304 is backed up for each one of all the tape media that havebecome the migration destinations.

The flow illustrated in FIG. 6 ends in operation 5104. The metadata(inode-a_v1) and the index (Index_v1) are backed up on a medium 310-1.It should be noted that the backup process may be scheduled to beperformed at a frequency as required, such as once a day. After thebackup of the metadata and the index, operation of the file system forthe hierarchical storage is resumed.

FIG. 8 is a diagram describing a state where the operation has beensubsequently resumed after the backup process for the file system forthe hierarchical storage, in accordance with embodiments of the presentinvention. On the operation site 300, if the file is subsequentlyupdated (to be file-a_v2 on the shared disk 304), the updated file ismigrated (file-a_v2 is written on the tape medium 312), and the metadatais also updated (to be inode-a_v2). In the updated metadata(inode-a_v2), the tape ID in its extension attribute is updated, ifnecessary.

Moreover, location information on the newly written file (file-a_v2) onthe tape is rewritten with a new index (Index_v2) on both the tapemedium 312 and the shared disk 304. If there is no longer any unusedportion on the tape medium 312, the file data is written on another tapemedium, and in the metadata (inode-a_v2), a new tape ID is overwrittenin its extension attribute. In this state, if the backup process isperformed again, the metadata (inode-a_v2) and the index (Index_v2) arebacked up on a medium 310-2.

FIG. 9 is a flowchart illustrating a restoration method for the filesystem for the hierarchical storage, in accordance with embodiments ofthe present invention. FIG. 10 is a diagram describing the restorationprocess for the file system for the hierarchical storage, in accordancewith embodiments of the present invention.

FIG. 10 illustrates the recovery-side system as a recovery site 320, inaddition to the operation site 300. The recovery site 320 has aconfiguration similar to the operation site 300, and includes adistributed shared file system 322, a shared disk 324, and a tapelibrary 326. In order to restore the file system on the recovery site320, three items, that is, (1) the tape medium 312, (2) the metadata(the inode image) at a time point of desired recovery, and (3) the indexbacked up substantially at the same time as the metadata, are moved fromthe operation site 300 to the recovery site 320. It should be notedthat, in FIG. 10, the file (file-a) has been further updated after thelatest backup has been performed as illustrated in FIG. 8. Accordingly,the tape medium 312 to be moved includes the updated file (file-a_v3)and an updated index (Index_v3).

The process illustrated in FIG. 9 is started from operation 5200, inresponse to the restoration request from the administrator. In operation5201, the backup driver 230 restores metadata (inode information) of thedistributed shared file system 322 from the backup on the backupdestination medium 310-2. While FIG. 10 illustrates only the metadata(inode-a_v2) of one file, the backup/restoration unit 212 collectivelyrestores the metadata of the plurality of files.

In operation S202, the backup driver 230 changes the state into thefully-migrated state, in the metadata of each restored file. Forexample, even if the state has been in the pre-migrated state at thebackup time point, the shared disk 324 at an upper level is emptyimmediately after the restoration, and the file body data exists only onthe tape medium 312. Operation S202 is thus for the purpose of havingconsistency with this state.

In operation 5203, the backup driver 230 restores the index to a managedarea for each tape medium on the shared disk 324, from the backup withinthe backup destination medium 310-2, which has been performedsubstantially at the same time point as the metadata. While FIG. 10illustrates only the index (Index_v2) of one tape medium 312, if thereare a plurality of tape media, one backed up index is replicated on theshared disk 324, for each one of all the tapes. In operation S204, theextension file system 220 is started, and this process ends in operationS205.

The recovery is completed here, so that necessary files can be read out.

In an example illustrated in FIG. 10, since the file has been furtherupdated after the latest backup has been performed, the index on thetape medium 312 has been updated (to be Index_v3), and also, the updatedfile (file-a_v3) has been appended on the DP of the tape medium 312.Accordingly, the index (Index_v2) restored on the shared disk 324 doesnot match the index (Index_v3) on the IP of the tape medium 312.

Accordingly, the hierarchical storage management system 100 according tothe present embodiment is configured to, at the time of the firstmounting of the tape medium after the restoration, ignore the index file(Index_v3) on the IP of the tape medium, and perform the mounting withthe restored index (Index_v2) on the shared disk 324. Locationinformation on the file body data (file-a_v2) at the backup time pointof the file (file-a) on the DP exists in the restored index (Index_v2).Moreover, since the latest file (file-a_v3) is written so as to beappended on the DP of the tape medium 312, the file (file-a_v2) at thebackup time point also exists thereon. Accordingly, the file (file-a_v2)at the backup time point can be accessed with the restored index(Index_v2).

FIG. 11 is a diagram schematically illustrating the format of the tapemedium that can be used in the hierarchical storage management system,in accordance with embodiments of the present invention. As illustratedin FIG. 11, in the LTFS format, the file data (user data) is saved onthe DP of the tape medium. A block number (location information) withinthe DP in which the data has been written is written to the index fileon the IP of the tape medium. Accordingly, the index file can be used tospecify the block in which the file data has been written, so that thefile can be read out.

If the file has been updated, the file is appended on the DP of the tapemedium (which may also be a tape medium different from the previous onewithout unused capacity or the like) that is the migration destinationof the file, and also, in the index of the tape medium that is themigration destination, old location information on the file is erased,and new location information is written to replace the index file on theIP with the latest one. If a new file has been added, the file isappended on the DP of the tape medium that becomes the migrationdestination, and also, in its index, the location information is writtento replace the index file on the IP with the latest one. If the file hasbeen deleted, in the index of the tape medium that has been themigration destination, the old location information on the file iserased, and the index file on the IP is replaced with the latest one. Ifa rollback function is enabled, the index file has also been saved onthe DP, the previous index on the DP is not erased and is left, and thelatest index is appended at the end of the data.

It should be noted that, in the above described embodiment, the index ofthe tape medium on the shared disk has been described as beingreplicated on the backup destination medium. In other embodiments,however, if the rollback function is enabled, the index of the tapemedium that is the file migration destination is also appended on the DPat each time point. Accordingly, specification information forspecifying the index, such as the block number on the DP in which theindex at the backup time point has been written, and a generation numberof the index, may be stored on the backup destination medium, instead ofan index body of the tape medium. In that case, however, the index onthe DP needs to be read out for the restoration of the index. In thisview, preferably, an embodiment in which the index is replicated can besaid to be preferred.

With reference to FIGS. 12 and 13, file access after the restorationwill be described below. FIG. 12 is a flowchart illustrating a fileaccess method after the restoration in the file system for thehierarchical storage, in accordance with embodiments of the presentinvention. FIG. 13 is a diagram describing the file access method in thefile system for the hierarchical storage, in accordance with embodimentsof the present invention.

Here, a case of using LTFS EE will be described as an example. In thiscase, the file data to be migrated within the tape media has a uniqueidentifier (UID) including a cluster ID, a file system ID, an inodegeneration, and an inode number, as a file name, and is linked to a pathon the distributed shared file system. When the file is updated, the UIDis changed, and the link is re-created. Moreover, the tape IDs foridentifying the tape media to which the file data has been migrated aresaved as the attribute information within the inode, and they can beused to read out the files.

Files on the distributed shared file system are recognized under adirectory “/gpfs” as illustrated in the upper section of FIG. 13. Incontrast, in a file system of the tape library, subdirectories havingthe tape IDs are created under a directory “/ltfs” as illustrated in thelower section of FIG. 13, and under the subdirectory for each individualtape ID, files on the tape medium are recognized in directory hierarchy.

The process illustrated in FIG. 12 is started from operation S300, inresponse to a request for access to a file. Here, it is assumed that auser has accessed a file (for example, “/gpfs/dir1/file-a”) on thedistributed shared file system. In operation S301, the node 112 that hasaccepted the access request first determines whether the file exists onthe shared disk. In operation S301, if the file is determined to existon the shared disk (YES), the node 112 accesses the file on the shareddisk in operation S302, and ends this process in operation S311.

In contrast, in operation S301, if the file is determined not to existon the shared disk (NO), the node 112 specifies the tape ID to which anappropriate file has been migrated, based on the inode information onthe file, in operation S303. The tape ID (for example, “tapeA”) of thetape medium, on which actual data has been written, has been written ina file extension attribute in the inode information. In operation S304,the tape medium identified by the tape ID is loaded into the tape drive,and mounted.

In operation S305, the node 112 determines whether the index on the IPof the tape medium to be mounted matches the corresponding index on theshared disk. In the example illustrated in FIG. 10, since the file hasbeen updated after the backup of second-generation metadata (inode_v2),a third-generation index (Index_v3) exists on the IP of the tape medium.In contrast, a second-generation index (Index_v2) exists on the shareddisk, and thus a mismatch occurs. In operation S305, if the indexes aredetermined to mismatch each other (NO), the process branches tooperation S306.

In operation S306, the node 112 determines whether the above mounting isthe first mounting after the restoration. A flag is prepared to be setat the time of the first mounting for a predetermined tape medium, forexample, and it is possible to check whether the flag is set, anddetermine whether the mounting is the first one. In operation S306, ifthe mounting is determined to be the first one (YES), the processbranches to operation S307.

In operation S307, the node 112 ignores the index on the IP of the tapemedium, performs the mounting with the index on the shared disk, andadvances the process to operation S309. In the example illustrated inFIG. 10, the third-generation index (Index_v3) on the tape medium isignored, and the second-generation index (Index_v2) on the shared diskis used.

In contrast, in operation S306, if the mounting is determined not to bethe first one (NO), the process branches to operation S308. In operationS308, the node 112 replicates the index on the tape medium to the shareddisk, performs the mounting, and advances the process to operation S309.It should be noted that if the indexes are determined to match eachother (YES) in operation S305, the process is advanced directly tooperation S309.

In operation S309, the node 112 accesses a file(“/ltfs/tapeA/dir1/file-a”) on the specified tape medium, based on theindex on the shared disk. This file is actually a symbolic link, and thereadout is performed from a file in a folder “tapeA/.LTFSEE_DATA” wherethe file body data exists.

In the example illustrated in FIG. 10, since the file has been updatedafter the backup of the second-generation metadata (inode_v2),information on the file data (file-a_v3) written after the backup hasbeen saved in the index (Index_v3) on the tape medium. This index,however, is ignored at the time of the first mounting, and thesecond-generation index (Index_v2), which has been restored on theshared disk and used for the mounting, is used. Since the information onthe file (file-a_v2) has been saved in the second-generation index(Index_v2), the file body data “file-a_v2” at the backup time point isread out.

In operation S310, if necessary, the file body data involved in theaccess is recalled onto the disk, the state of the file is changed, andthis process ends in operation S311. In the case of readout access, forexample, the state is changed into the pre-migrated state for existenceboth on the disk and the tape. In the case of overwrite access, forexample, the state is changed into a resident state for existence onlyon the disk. It should be noted that, at the time of writing to themounted tape medium, or at the time of unmounting the mounted tapemedium, the index on the IP of the tape medium is overwritten with thelatest index after the restoration, and the mismatch between the diskand the tape is thus resolved at that timing.

Hereinafter, with reference to FIGS. 14 and 15, and to FIG. 11 again,the backup method and the restoration method according to embodiments ofthe present invention will be compared to other envisioned methods.

(Comparison to the Case with Write Inhibition)

FIG. 14 is a diagram describing another backup method and anotherrestoration method with write inhibition. In order to avoid theinconsistency between the backed up and restored metadata and the fileon the tape medium, as described with reference to FIG. 4, a conceivableapproach is to write-inhibit the tape media that have already beenwritten, each time the backup is performed.

Successive creation of three different files “file-a,” “file-b,” and“file-c” will be considered as in FIG. 14, for example. For eachcreation, each file is migrated to each tape medium, each backup ofmetadata “inode-a,” “inode-a/b,” and “inode-a/b/c” is performed, and thetape on which each of the files “file-a,” “file-b,” and “file-c” hasbeen saved is write-inhibited. This results in three write-inhibitedtape media. Moreover, for recovery, a medium 510-3 that retains the lastbackup is used to restore the metadata “inode-a/b/c.” Moreover, all thethree tape media, which have been write-inhibited for each backup, aremoved to the recovery site 520.

In order to retrieve the latest information as much as possible, it isnecessary to perform the backups of the metadata of the distributedshared file system at an appropriate frequency, and write-inhibit thetape media each time. If the backups are frequently performed, however,tapes still having unused portions will be write-inhibited, which leadsto an increase in unavailable capacity of the tapes. Moreover, alarge-scale file system introduces a large number of tape drives withina tape library to simultaneously write a plurality of files into aplurality of tape media in a distributed manner, in order to acceleratemigration. Specifically, in such a case, each write-inhibition of thetape media makes the tapes, which have left the unused portions, of thesame number as the tape drives, and thus severely decreases the usageefficiency of the tapes.

A calculation is provided for a system using a tape library including 10tape drives, by way of example. In order to increase speed of writing ata time, it is assumed that all the tape drives are used to performsimultaneous saving into 10 tape media in a distributed manner. Whilethe percentage of usage of the tape capacity varies, 50% of the tapecapacity is assumed to be used on average. Moreover, it is assumed that50% of the capacity of each of the 10 tape media is used per day, andthat the backups of the metadata are performed every day. If the LTO6format is used, the tape capacity is 6.25 TB in a compressed state.Accordingly, the above described method with the write inhibition usesonly 50% of the 10 tape media, and thus leaves approximately 31 TBunused per day. If the backups are performed every day, it results in aloss of approximately 218 TB of the capacity, which is 50% of the totalcapacity, per week.

In contrast, in the backup method and the restoration method accordingto the embodiment of the present invention, if a similar condition isassumed, 40 tape media are used, in which 30 tape media are put in astate where they have run out of the capacity without any unusedportion, through continuation of the appending to the tape media for aweek. While only 50% of 10 tape media are used on the last day, theunused portions of the tapes after a week are suppressed toapproximately 31 TB, which is 13% of the total capacity. Even if 90% ofthe capacity of each tape is used every day, there is a loss of 10% inthe approach with the write inhibition, while the loss is reduced to theextent of 1%, which is approximately within 1/10, in an approachaccording to the embodiment of the present invention.

(Comparison to the Case with Reclamation)

FIG. 15 is a diagram describing another backup method and anotherrestoration method with the write inhibition and the reclamation. Asillustrated in FIG. 15, for the above described unused portions of thetapes, the files (file-a/b/c), which have been saved once into aplurality of tape media 512-1 to 512-3 in a distributed manner, arerewritten onto one tape medium 514 through the reclamation, before thebackups of the metadata are performed. The rate of utilization of thetape capacity can thus be improved.

Data movement in the reclamation, however, causes reading and writing tothe tapes, and puts a load on the system through occupation of the tapedrives and data transactions, in the case of a large number of files.Moreover, if previous file data is desired to be read out for a reasonof an erroneously erased file or the like, a function referred to as“rollback function” described below can be utilized for going back topast file states and reading out the previous file data. However, evenif there are the backups of the metadata before file deletion, since thetape ID differs between the metadata and an actual tape due toperformance of the reclamation, the previous file data cannot be readout.

If the reclamation is performed for the tapes each having 50% of thecapacity used in the above described system having the 10 tape drives,at most 50% of data will be moved to another tape. Since time forwriting to one tape is approximately 4.4 hours at the fastest speed inthe case of the LTO6 format, even if the 10 tape drives are used, thetape drives are occupied for 2.2 hours to reclaim 10 tapes. During areclaim process, performance degradation occurs, such as inability toimmediately read out the files migrated to the tape.

In contrast, the backup method and the restoration method according toembodiments of the present invention only require the backups of themetadata and the index. Here, in order to estimate backup time, sizes ofthe metadata and the index to be backed up are first calculated. In thisestimation, the number of files to be stored on one tape medium isassumed to be approximately 50000. This value has been approximated from6.25 TB, which is the capacity in the compressed state in LTO6, on theassumption of the average file size of approximately 100 MB, and also inconsideration of usage for the index. The number of tapes is assumed inthe case where 50% of the capacity of each of the 10 tapes has beencontinuously used per day for a week as described above. In other words,the number of tapes is assumed to be approximately 35.

The size of an inode image backup for the number of files “50000” iscalculated according to the following expression (Expression 1) sincethe inode size of one file is 512 B (bytes), and is estimated to beapproximately 896 MB. While the size is actually compressed to besmaller than this size, the above value is calculated as the maximumvalue.

Image backup size(B)=512B×(the number of files/tape)×(the number oftapes)  (Expression 1)

Extent information, which retains information on fragmented file dataresulting from one file being written in a distributed manner within onetape, exists in an LTFS index. An offset within the file, the blocknumber of the data on the tape, the number of bytes, and the like havebeen saved in the extent information. The size of the index per tapemedium can be roughly estimated according to the following expression(Expression 2), with errors in the number of digits of time and thelike, which are saved parameters.

Index size(B)of one tape=1350B+the number of files×(1211B+file pathlength(B)+the number of extents×165B)+the number ofdirectories×(directory path length(B)+400B)  (Expression 2)

Here, the minimum sizes of the index and the extent are 1350 B and 165B, respectively. In LTFS, the file path length and the directory pathlength are defined as 512 B or less.

While the size of the index varies with a difference in the number ofextents depending on a form of writing data blocks (the degree ofdistribution), or a difference in the length of the file name, the sametape capacity, the same average file size, the same number of files pertape, and the same number of tapes as those described above are assumedhere, and it is further assumed that the number of extents per file is10, the average value of the file path length is 256 B, and the averagevalue of the directory path length is 126 B. According to the aboveexpression (Expression 2), the size of the index per tape is thenestimated to be approximately 156 MB, and the size for 35 tapes isestimated to be approximately 5.46 GB.

If the backup destination media are the tape media, each of writing timeand readout time requires only on the order of 14 seconds. Even if 1000tape media are recovered, they are estimated to be replicable in 6.5minutes. In other words, it is possible to say that a restorationapproach according to embodiments of the present invention can save thereadout time in comparison to an approach with the reclamation.

Moreover, with the use of the reclamation, since the files are moved toanother tape, and index history is erased to empty the original tape,the rollback function as described below for recovering erased data withthe use of an old index cannot be used. The backup method and therestoration method according to the embodiment of the present inventioncan also go back to the past, and recover an old file system.

(Comparison to the Case with Rollback)

As described with reference to FIG. 11, the rollback for utilizing theindex written on the DP to retrieve past file data is enabled for thedata written in the LTFS format.

The rollback requires mounting of the tape medium and readout in reverseorder from the latest index, in order to search for the index of ageneration to be rolled back on the DP. In an example illustrated inFIG. 11, if a file in a state prior to certain time T is to be read out,a third-generation index #3 is first read out, and if the index #3 hasbeen written at time T or later, the block number of an index #2 on theDP on the tape, which has been written in the index #3, is read out, anda readout position is moved to a location where the index #2 has beenwritten. The index #2 is read out, and comparison is repeated until anindex prior to time T is found.

In this way, while the rollback function can also designate the oldindex to read out the file, several tens of minutes to several hours arerequired for one tape, and the recovery takes a long time with anincrease in the number of files or tapes. It is possible to say that therestoration method according to embodiments of the present invention cansave the readout time also in comparison to an approach with therollback.

(Comparison to Other Methods)

In addition to the above description, periodic full backups of all themetadata (the inode information) and the file data enable restoration ofpast states. In the case of a large amount of data, however, a largeamount of tapes for the backup, and many resources used in the backup,such as disk caches, are required.

As described above, according to the embodiment of the presentinvention, it is possible to provide a backup method, a restorationmethod, a storage system, and a program, which can achieve shortenedrecovery time, an operational file system even after the backup, a smallload on the system, and increased usage efficiency of the storage mediathat become the migration destinations.

In the backup method according to the embodiment of the presentinvention, on the operation site, the file data is saved on the tapemedium, and the metadata and the index are backed up. In the restorationmethod according to the embodiment of the present invention, on therecovery site, the metadata is restored, also the index, which has beenbacked up at the same time as the metadata, is restored, and this indexis used to read out the file data on the tape at the same time point asthe metadata. A time-consistent file system can thereby be recovered.

Unused areas of the tapes can be decreased to ¼ or less than those in anapproach with inhibition of updates to the tape media, and the efficientuse of the tape capacity is enabled. Moreover, the backup and therestoration required for the recovery of the file system can beperformed in a short time, without any system load for the occupation ofthe tape drives for rewriting the tape media through the reclamation forseveral hours, and the like.

Some embodiments provide a program product for causing a managementcomputer to function, the management computer being for managing backupof a file system, the file system managing hierarchical storageincluding one or more storage media, each of the one or more storagemedia including a data part which is separated from an index and onwhich updated information is appended and kept, the file system managingeach of a plurality of pieces of data within the file system to bemigrated to at least any of the one or more storage media, the programproduct being for causing the management computer to function as: meansfor controlling metadata of the plurality of pieces of data migratedwithin the file system to be backed up; and means for controlling theindex of each of the one or more storage media to which the plurality ofpieces of data have been migrated, to be backed up substantially at thesame time point as the metadata, wherein backed up data of the metadataand the index is used in restoration along with the one or more storagemedia.

Some embodiments provide a program product for causing a managementcomputer to function, the management computer being for managingrestoration of a file system, the file system managing hierarchicalstorage including one or more storage media, each of the one or morestorage media including a data part which is separated from an index andon which updated information is appended and kept, the program productbeing for causing the management computer to function as: means forcontrolling metadata of a plurality of pieces of data within the filesystem to be restored from backed up data, and controlling, in themetadata, the plurality of pieces of data to be set into a state ofhaving been fully migrated to at least any of the one or more storagemedia; and means for controlling the index of each of the one or morestorage media to be restored from data backed up substantially at thesame time point as the metadata, wherein the one or more storage mediaare storage media on which backups of the metadata and the index havebeen taken.

The above functions of embodiments of the present invention can beachieved by device-executable programs described in legacy programminglanguages, object-oriented programming languages or the like, such asassembler, C, C++, C#, and Java®, and can be stored and distributed indevice-readable recording media, or transmitted for distribution.

While embodiments of the present invention have been described abovewith the particular embodiment, the present invention is not limited tothe embodiment, and can be modified within a scope conceivable by thoseskilled in the art, through other embodiments, additions, modifications,deletions and the like, which are included within the scope ofembodiments of the present invention, as long as the operation andeffect of embodiments of the present invention are provided in anyaspect.

The term(s) “Smalltalk” and the like may be subject to trademark rightsin various jurisdictions throughout the world and are used here only inreference to the products or services properly denominated by the marksto the extent that such trademark rights may exist.

The term “exemplary” means of or relating to an example and should notbe construed to indicate that any particular embodiment is preferredrelative to any other embodiment.

What is claimed is:
 1. A method for backup, the method comprising:backing up metadata of a plurality of pieces of migrated data within afile system for managing hierarchical storage including one or morestorage media, wherein each of the plurality of pieces of migrated datais migrated to at least one of the one or more storage media, each ofthe one or more storage media including a data part which is separatedfrom an index, and wherein updated information is appended to the one ormore storage media; and backing up the index of each of the at least onestorage media to which the plurality of pieces of migrated data havebeen migrated, substantially at the same time point as backing up themetadata, wherein backup data of the metadata and the index is used inrestoration along with the one or more storage media.
 2. The method ofclaim 1, further comprising: resuming operation of the file system forthe hierarchical storage subsequent to backing up the metadata and theindex.
 3. The method of claim 1, wherein the index of each of the one ormore storage media is stored on a managed storage area of thehierarchical storage, and wherein backing up the index includesgenerating backup data of the index by replicating each index at abackup time point which has been stored on the managed storage area. 4.The method of claim 1, wherein the index of each of the one or morestorage media is appended on the data part included in each of the oneor more storage media, and the index of each of the one or more storagemedia is stored to the data part of the storage media; wherein backingup the index includes generating backup data of the index by storingspecification information for specifying each index at a backup timepoint which has been appended on the data part.
 5. The method of claim1, further comprising: in response data within the file system beingadded or modified, appending the added or modified data on a data partof a storage medium that is a migration destination of the added ormodified data and writing location information of the added or modifieddata on the data part to an index of the storage medium that is themigration destination of the added or modified data; and in response todata within the file system being deleted, erasing the locationinformation of the deleted data from the index of the data part of thestorage medium being the migration destination of the data.
 6. Themethod of claim 1, wherein the one or more storage media are one or moretapes, and wherein the hierarchical storage includes one or more piecesof on-line storage, one or more pieces of near-line storage, or acombination thereof, at an upper level of the one or more tapes.
 7. Themethod of claim 1, wherein the metadata of the file system includesmedium identification information for identifying the storage medium towhich the data has been migrated; and wherein the index of the storagemedium includes the location information of the migrated data on thedata part.
 8. A method for restoration, the method comprising: restoringmetadata of a plurality of pieces of data within a file system frombackup data, wherein the file system is for managing hierarchicalstorage including one or more storage media, each of the one or morestorage media including a data part that is separated from an index, andwherein updated information is appended to the one or more storagemedia; setting, in the restored metadata, the plurality of pieces ofdata into a state of having been fully migrated to at least one of theone or more storage media; and restoring the index of each of the one ormore storage media from data backed up substantially at the same timepoint as the metadata, wherein the one or more storage media are storagemedia on which backups of the metadata and the index have beenperformed.
 9. The method of claim 8, further comprising: mounting aparticular storage medium of the one or more storage media on which thebackups have been performed; determining whether the particular storagemedium is a first storage media medium mounted after a restoration; andif the particular storage medium is determined to be the first storagemedium mounted, configuring the index existing on the particular storagemedium to be ignored, and configuring the restored index to be used. 10.The method of claim 9, further comprising: at a time of writing to themounted storage medium or a time of unmounting the mounted storagemedium, overwriting an index part included in the storage medium, with alatest index after the restoration.
 11. The method of claim 8, whereinthe backup data of the index includes each index of each of the one ormore storage media at a backup time point, and wherein each indexincluded in the backup is either replicated on a managed storage area ofthe hierarchical storage or is incorporated as an index on the managedstorage area of the hierarchical storage.
 12. The method of claim 8,wherein the backup data of the index includes specification informationfor specifying each index at a backup time point which has been appendedon the data part of each of the one or more storage media, and eachindex on the data part which is specified based on the specificationinformation included in the backup is replicated on a managed storagearea of the hierarchical storage.
 13. The method of claim 8, furthercomprising: receiving a request for access to predetermined data withinthe file system; specifying a storage medium to which the predetermineddata has been fully migrated from the restored metadata of thepredetermined data; obtaining location information on the predetermineddata on the data part of the storage medium to which the predetermineddata has been fully migrated from the restored index of the storagemedium; and accessing the predetermined data on the data part of thestorage medium.
 14. The method of claim 8, wherein the state of havingbeen fully migrated to at least any of the one or more storage media isa state of existing on at least any of the one or more storage media,but not existing on any other upper storage media constituting thehierarchical storage.
 15. A storage system, the storage systemcomprising: one or more storage drive devices for loading at least oneof one or more storage media constituting hierarchical storage, each ofthe one or more storage media including a data part which is separatedfrom an index and on which updated information is appended and kept; oneor more computers for causing a file system to run, the file systemmanaging the hierarchical storage and managing each of a plurality ofpieces of data within the file system such that each of the plurality ofpieces of data is migrated to at least any of the one or more storagemedia; and a management computer controlling metadata of the pluralityof pieces of data migrated within the file system such that the metadatais backed up and also controlling the index of each of the one or morestorage media to which the plurality of pieces of data have beenmigrated such that the index is backed up substantially at the same timepoint as the metadata, wherein backup data of the metadata and the indexis used in restoration along with the one or more storage media.
 16. Thestorage system of claim 15, wherein the management computer controlsoperation of the file system for the hierarchical storage such thatoperation is resumed after the metadata and the index have been backedup.
 17. A storage system, comprising: one or more storage drive devicesfor loading at least one of one or more storage media constitutinghierarchical storage, each of the one or more storage media including adata part which is separated from an index and on which updatedinformation is appended and kept; one or more computers for causing afile system to run, the file system managing the hierarchical storage;and a management computer, the management computer controlling metadataof a plurality of pieces of data within the file system such that themetadata is restored from backup data, also controlling the index ofeach of the one or more storage media such that the index is restoredfrom data backed up substantially at the same time point as themetadata, and setting, in the metadata, the plurality of pieces of datainto a state of having been fully migrated to at least any of the one ormore storage media, wherein the one or more storage media are storagemedia on which backups of the metadata and the index have beenperformed.
 18. The storage system of claim 17, wherein when one of theone or more storage media on which the backups have been performed hasbeen mounted, if the mounting is determined to be a first one after therestoration, the management computer configures the index existing onthe mounted storage medium to be ignored, and configures the restoredindex to be used.